Electronic Message Handling System and Method Between Sending and Recipient Devices with Display Separation

ABSTRACT

An electronic messaging system and method with reduced traceability by separation of display of media component of message content and header information. An electronic message having an identifier of a recipient and a message content including an image media component is received at a server from a sending user device at which a display for associating the media component with the electronic message is provided without displaying the identifier of a recipient with the media component such that a single screen capture of the identifier of a recipient and the media component is prevented. The electronic message including an identifier of a sending user is transmitted to a recipient user device at which a display presenting the media component is provided without displaying the identifier of a sending user such that a single screen capture of both the identifier of a sending user and the media component is prevented.

RELATED APPLICATION DATA

This application is a continuation application of U.S. patentapplication Ser. No. 15/061,351, filed Mar. 4, 2016, and titled“Electronic Message Handling System and Method Between Sending andRecipient Devices with Separation of Display of Media Component andHeader Information,” which is a continuation application of U.S. patentapplication Ser. No. 13/447,932, filed Apr. 16, 2012, and titled“Reduced Traceability Electronic Message System and Method,” which is acontinuation-in-part of U.S. patent application Ser. No. 12/605,885,filed Oct. 26, 2009, and titled “Reduced Traceability Electronic MessageSystem and Method,” which is a continuation application of U.S. patentapplication Ser. No. 11/401,148, filed Apr. 10, 2006, and titled“Reduced Traceability Electronic System and Method,” each of which isincorporated by reference herein in its entirety. This application alsoclaims the benefit of priority of U.S. Provisional Patent ApplicationSer. No. 60/703,367, filed Jul. 28, 2005, and titled “Method and Systemfor Reducing Traceability of Electronic Messages,” which is incorporatedby reference herein in its entirety.

COPYRIGHT NOTICE

A portion of the disclosure of this patent document contains materialwhich is subject to copyright protection. The copyright owner has noobjection to the facsimile reproduction by anyone of the patent documentor the patent disclosure, as it appears in the U.S. Patent and TrademarkOffice patent files or records, but otherwise reserves all copyrightrights whatsoever.

FIELD OF THE INVENTION

The present invention generally relates to the field of electronicmessaging. In particular, the present invention is directed to anelectronic message handling system and method between sending andrecipient devices with separation of display of media component andheader information.

BACKGROUND

Typically, an electronic message between two people is not private. Itmay travel along a public network, such as the Internet, and besusceptible to interception by unintended third parties. Messages arealso logged and archived by the communication systems themselves. Theymay also be copied, cut, pasted, printed, forwarded, blind copied, orotherwise manipulated. This may give a message a “shelf-life” that isoften uncontrollable by the sender or even the recipient. Surreptitiouslogging (e.g., by keystroke and message recording software) may occur bythird parties that have gained unauthorized access to either thecomputer of the sender and/or the recipient. Electronic messages includethe message content itself coupled to identifying information regardingthe sender, the recipient, the location of the message, times and datesassociated with the message, etc. This allows a third party that islogging messages, intercepting messages, or simply gaining access to themessaging system's logs or inbox archives to associate the potentiallyimportant identifying information (typically referred to as headerinformation) with the message content. These are only some of the waysin which electronic messages can be misused. There is a demand for asystem and method for reducing the traceability of electronic messages.

SUMMARY OF THE DISCLOSURE

In one implementation, a method of handling an electronic messagebetween a sending user device and a recipient user device in a networkedenvironment is provided. The method includes providing a first reducedtraceability electronic messaging application program to a sending userdevice, the first reduced traceability electronic messaging applicationprogram including instructions executable by a first processor of thesending user device to provide a first plurality of reduced traceabilitydisplays via the sending user device; providing a second reducedtraceability electronic messaging application program to a recipientuser device, the second reduced traceability electronic messagingapplication program including instructions executable by a secondprocessor of the recipient user device to provide a second plurality ofreduced traceability displays via the recipient user device; receivingan electronic message at a server via a first network, the electronicmessage sent from the sending user device, wherein the electronicmessage received at the server includes an identifier of a recipient anda message content including a media component, the first plurality ofreduced traceability displays including a first display and a seconddisplay, the first display configured to allow a user of the sendinguser mobile device to associate the message content including a mediacomponent with the electronic message, the second display configured toallow the user of the sending user mobile device to associate theidentifier of a recipient with the electronic message, the instructionsexecutable by the first processor providing the first and seconddisplays such that the identifier of the recipient is not displayed withthe media component via the first display preventing a single screencapture of both the identifier of a recipient and the media component;and transmitting the electronic message from the server to the recipientuser device via a second network that includes a wireless communicationsportion, wherein the electronic message transmitted to the recipientuser device includes an identifier of a sending user and the messagecontent including a media component, the second plurality of reducedtraceability displays including a third display and a fourth display,the third display presenting the identifier of a sending user, thefourth display presenting the media component, the instructionsexecutable by the second processor providing the third and fourthdisplays such that the identifier of a sending user is not displayedwith the media component via the fourth display preventing a singlescreen capture of both the identifier of a sending user and the mediacomponent.

In another implementation, a method of handling an electronic messagebetween a sending user mobile device and a recipient user mobile devicein a networked environment is provided. The method includes providing afirst set of reduced traceability electronic messaging instructions to asending user mobile device, the first set of reduced traceabilityelectronic messaging instructions including instructions executable by afirst processor of the sending user mobile device to cause a displaydevice of the sending user mobile device to provide a first plurality ofreduced traceability displays; providing a second set of reducedtraceability electronic messaging instructions to a recipient usermobile device, the second set of reduced traceability electronicmessaging instructions executable by a second processor of the recipientuser mobile device to cause a display device of the recipient usermobile device to provide a second plurality of reduced traceabilitydisplays; receiving an electronic message at a server via a firstnetwork that includes a wireless communications portion, the electronicmessage sent from the sending user mobile device, wherein the electronicmessage received at the server includes an identifier of a recipient anda message content including an image, the first plurality of reducedtraceability displays including a first display and a second display,the first display configured to allow a user of the sending user mobiledevice to associate the message content including an image with theelectronic message, the second display configured to allow the user ofthe sending user mobile device to associate the identifier of arecipient with the electronic message, the instructions executable bythe first processor providing the first and second displays such thatthe identifier of the recipient is not displayed with the image via thefirst display preventing a single screen capture of both the identifierof a recipient and the image; and transmitting the electronic messagefrom the server to the recipient user mobile device via a second networkthat includes a wireless communications portion, wherein the electronicmessage transmitted to the recipient user mobile device includes anidentifier of a sending user and the message content including an image,the second plurality of reduced traceability displays including a thirddisplay and a fourth display, the third display presenting theidentifier of a sending user, the fourth display presenting the image,the instructions executable by the second processor providing the thirdand fourth displays such that the identifier of a sending user is notdisplayed with the image via the fourth display preventing a singlescreen capture of both the identifier of a sending user via the fourthdisplay and the image and such that the image is not displayed with theidentifier of a sending user via the third display preventing a singlescreen capture of both the identifier of a sending user and the imagevia the third display.

In yet another implementation, a computer readable hardware storagemedium containing machine executable instructions implementing a methodof handling an electronic message between a sending user device and arecipient user device in a networked environment, the electronic messageincluding header information and a message content, is provided. Theinstructions include a set of instructions executable by a firstprocessor of the sending user device to provide a first plurality ofreduced traceability displays via the sending user device; a set ofinstructions executable by a second processor of the recipient userdevice to provide a second plurality of reduced traceability displaysvia the recipient user device; a set of instructions for receiving anelectronic message at a server via a first network, the electronicmessage sent from the sending user device, the electronic messagereceived at the server including an identifier of a recipient and amessage content including a media component, the first plurality ofreduced traceability displays including a first display and a seconddisplay, the first display configured to allow a user of the sendinguser mobile device to associate the message content including a mediacomponent with the electronic message, the second display configured toallow the user of the sending user mobile device to associate theidentifier of a recipient with the electronic message, the instructionsexecutable by the first processor providing the first and seconddisplays such that the identifier of the recipient is not displayed withthe media component via the first display preventing a single screencapture of both the identifier of a recipient and the media component;and a set of instructions for transmitting the electronic message fromthe server to the recipient user device via a second network thatincludes a wireless communications portion, the electronic messageincluding an identifier of a sending user and the message contentincluding a media component, the second plurality of reducedtraceability displays including a third display and a fourth display,the third display presenting the identifier of a sending user, thefourth display presenting the media component, the instructionsexecutable by the second processor providing the third and fourthdisplays such that the identifier of a sending user is not displayedwith the media component via the fourth display preventing a singlescreen capture of both the identifier of a sending user and the mediacomponent.

BRIEF DESCRIPTION OF THE DRAWINGS

For the purpose of illustrating the invention, the drawings show aspectsof one or more embodiments of the invention. However, it should beunderstood that the present invention is not limited to the precisearrangements and instrumentalities shown in the drawings, wherein:

FIG. 1 illustrates one example of a schematic diagram of an exemplarysystem for electronic messaging depicting an initial electronic messagebeing communicating from one user to another;

FIG. 2 illustrates one example of a computer environment that may beutilized to implement various aspects of the present disclosure;

FIG. 3 illustrates another example of a schematic diagram of anotherexemplary system and method of the present disclosure;

FIG. 4 illustrates another example of a schematic diagram of anotherexemplary system and method of the present disclosure;

FIG. 5 illustrates one example of a flow chart depicting one exemplarymethod according to the present disclosure;

FIG. 6 illustrates another example of a flow chart depicting anotherexemplary method according to the present disclosure;

FIG. 7 depicts an exemplary login display image;

FIG. 8 depicts an exemplary display image including a recipient addressinput portion;

FIG. 9 depicts an exemplary display image including an electronicmessage content input portion;

FIG. 10 depicts an exemplary display image including an electronicmessage listing portion;

FIG. 11 depicts an exemplary display image including a reply messageinput portion.

FIG. 12 illustrates an exemplary one exemplary implementation of asingle display image screen method with separation of header and contentinformation on entry by a sending user of a computer;

FIG. 13 depicts another exemplary implementation of a single displayimage screen method with separation of header and content information onentry by a sending user of a computer;

FIG. 14 depicts an exemplary implementation of a single display imagescreen method utilized at a recipient end of a messaging system;

FIG. 15 depicts an example implementation of a display image screenhaving a first portion for entry of a recipient address (and/or otherheader information) and a second portion for entry of a message content;

FIG. 16 depicts another example implementation of a display image screenhaving a first portion for entry of a recipient address (and/or otherheader information) and a second portion for entry of a message content;and

FIG. 17 depicts yet another example implementation of a display imagescreen having a first portion for entry of a recipient address (and/orother header information) and a second portion for entry of a messagecontent.

DETAILED DESCRIPTION

The present disclosure provides a system and method reducingtraceability of an electronic message. In one embodiment, headerinformation and message content of an electronic message are displayedby a system and method of the present disclosure so that headerinformation and message content are not displayed at the same time. Aswill be clear to one skilled in the art from the disclosure below,separation of header information from message content reduces thetraceability of the electronic message. To further reduce traceabilityof an electronic message, header information may be automaticallydeleted at a first predetermined time and message content may beautomatically deleted at a second predetermined time (e.g., aftermessage content is viewed). In one example, the first and secondpredetermined times may occur sequentially (e.g., deleting headerinformation upon displaying message content and deleting message contentupon closing a display of message content), simultaneously (e.g.,deleting message content and associated header information upon closinga display of message content), or out of order such that the secondpredetermined time occurs before the first predetermined time (e.g.,displaying message content first, deleting message content, displayingheader information, then deleting header information). These and otheraspects of the present disclosure will be described in greater detailbelow with respect to various exemplary embodiments illustrated in FIGS.1 to 17.

FIG. 1 illustrates one embodiment of a system 100 for electronicmessaging depicting an electronic message 105 being sent from one userto another. System 100 may include any number of computers, such as thetwo user computers 110 and 115, coupled to a network 120. Network 120facilitates communication between computer 110 and computer 115. In oneexample, system 100 may be a closed system that may utilize open networkstructures (e.g., the Internet) for communication with users, but thatdoes not utilize open or third-party messaging systems (e.g., industrystandard email) that may increase the chance of message logging andimpact the recordless nature of an electronic message of the presentdisclosure. System 100 allows users of computers 110 and 115 tocommunicate with each other via one or more electronic messages, such aselectronic message 105 over network 120. As will be described in furtherdetail hereinafter, several aspects of system 100 reduce traceability ofelectronic messages, such as electronic message 105. In one example,electronic message 105 is automatically deleted from system 100 after itis viewed by the recipient to ensure that electronic message 105 cannotbe forensically recreated and to ensure there is no record of electronicmessage 105 ever existing on system 100 thereafter.

Although computers 110 and 115 are illustrated as workstation computers,any well known computer may be utilized in creating and/or viewingelectronic messages. Example computers include, but are not limited to,a personal computer, a workstation computer, a server computer, a laptopcomputer, a handheld device, a mobile telephone, a personal digitalassistant (PDA), another computing device capable of communicating anelectronic message via network 120, and any combinations thereof. System100 may include one or more server computers. In one example, system 100may reside substantially on a single server computer. In anotherexample, system 100 may be distributed across two or more servercomputers. In yet another example, system 100 may be distributed acrossa plurality of user computers without a server computer, such as in apeer-to-peer environment. In one such example, components of a messagingsystem according to the present disclosure and/or their functionality(e.g., storage of header information and message content, displaygeneration, reply generation, etc.) may occur at a recipient's usercomputer. In still another example, system 100 may be distributed acrossone or more server computers and one or more user computers. One or morerelay servers or other systems may be utilized between server computersand/or user computers.

FIG. 2 illustrates one example of a computing environment in theexemplary form of a computer 200 within which a set of instructions, forcausing the computer to perform any one of the methodologies of thepresent disclosure, may be executed. Computer 200 may include aprocessing unit 205, a system memory 210, and a system bus 215 thatcouples various components including system memory 210 to processingunit 205. System bus 215 may be any of several types of bus structuresincluding, but not limited to, a memory bus, a memory controller, aperipheral bus, a local bus, and any combinations thereof, using any ofa variety of bus architectures. System memory 210 may include a readonly memory (ROM) 220 and a random access memory (RAM) 225.

A basic input/output system 230 (BIOS), including basic routines thathelp to transfer information between elements within computer 200, suchas during start-up, may be stored in ROM 220. Computer 200 may alsoinclude a storage/memory device 235 for reading and/or writinginformation. Example storage devices include, but are not limited to, ahard disk drive for reading from and/or writing to a hard disk, amagnetic disk drive for reading from and/or writing to a removablemagnetic disk, an optical disk drive for reading from and/or writing toan optical media (e.g., a compact disc), and any combinations thereof.Storage/memory device 235 may be connected to bus 215 by an interface.In one example, storage/memory device 235 and associatedcomputer-readable media provide nonvolatile storage of computer readableinstructions, data structures, program modules, and/or other data forcomputer 200. It will be appreciated by those skilled in the art thatother types of computer-readable media that can store data that isaccessible by a computer in a volatile and/or non-volatile manner mayalso be used in an example operating environment. Examples of othertypes of computer-readable media include, but are not limited to, amagnetic cassette, a flash memory media (e.g., a card and athumb-drive), a digital video disk, a Bernoulli cartridge, a randomaccess memory (RAM), a read only memory (ROM), and any combinationsthereof. A computer-readable medium, as used herein, is intended toinclude a single medium as well as a collection of physically separatemedia, such as, for example, a collection of compact disks or one ormore hard disk drives in combination with a computer memory.

A number of program modules can be stored on storage/memory device 235,including, but not limited to, an operating system, one or moreapplication programs, other program modules, program data, computerimplemented instructions for carrying out the system and methodologiesof the present disclosure, and any combinations thereof. A user mayenter commands and information into computer 200 through one or moreinput devices, such as a keyboard 240 and/or a pointing device 245.Other examples of an input device include, but are not limited to amicrophone, a joystick, a game pad, a satellite dish, a scanner, and anycombinations thereof. These and other input devices may be connected toprocessing unit 205 through an interface 250 that is coupled to bus 215.Example interfaces for connecting an input device include, but are notlimited to, a serial interface, a parallel interface, a game port, auniversal serial bus (USB), an IEEE 1394 (Firewire) interface, a directinterface to system bus 215, and any combinations thereof.

A display device 255 may be connected to system bus 215 via aninterface, such as a display generator/video adaptor 260. Exampledisplay devices include, but are not limited to, a cathode-ray tube(CRT) monitor, a plasma display, an LCD display, and any combinationsthereof. In addition to a display device, a computer may include one ormore other peripheral output devices, such as a speaker and a printer. Apen digitizer and an accompanying pen/stylus may be included in order todigitally capture freehand input. A pen digitizer may be separatelyconfigured or coextensive with a display area 265 of display device 255.Accordingly, a pen digitizer may be integrated with display device 255,or may exist as a separate device overlaying or otherwise appended todisplay device 255.

Computer 200 may include a network connection 270 for connecting to oneor more of a variety of networks, such as network 120 of FIG. 1, andremote computer devices thereon. Example network connections mayinclude, but are not limited to, a network interface card, a modem, andany combinations thereof. Example networks include, but are not limitedto, a wide area network (e.g., the Internet, an enterprise network), alocal area network (e.g., a network associated with an office, abuilding, a campus or other relatively small geographic space), atelephone network, a direct connection between two computing devices,and any combinations thereof. A network, such as network 120 may employa wired and/or a wireless mode of communication. In general, any networktopology may be used. It will be appreciated that FIG. 1 depicts onlyone instance of a system 100, and that other instances may be createdwhere one or more computers utilize system 100. One or morecommunication protocols may be utilized with system 100 and/or withnetwork 120. Example protocols include, but are not limited to, TCP/IP,Ethernet, FTP, HTTP, HTTPS, and any combinations thereof. In oneexample, a user of a computer, such as computers 110, 115 may accesssystem 100 (e.g., on one or more server computers) utilizing a secureprotocol as is well-known. A user computer, such as computers 110, 115may utilize one or more software applications and/or one or more systembased applications in communicating with system 100. Example softwareapplications include, but are not limited to, a web browser (e.g.,INTERNET EXPLORER, MOZILLA, and NETSCAPE), Java (e.g., J2ME), BREW, adirect access client (e.g., CITRIX), and any combinations thereof.Example system applications include, but are not limited to, MICROSOFTWINDOWS, UNIX, LINUX, APPLE operating system, X-WINDOWS, COCOA,POCKETPC, and PALM.

Referring to FIG. 1 an exemplary electronic message 105 is communicatedby a sending user utilizing computer 110 to system 100 for furthercommunication to a recipient user. Exemplary system 100 includes anelectronic message receiver 125 for receiving one or more electronicmessages, such as electronic message 105. Electronic message receiver125 is in communication with an electronic message storage module 130.An electronic message storage module, such as electronic message storagemodule 130, stores electronic messages received by electronic messagereceiver 125 utilizing one or more particular data storagemethodologies. Many data storage methodologies will be recognized bythose skilled in the art and those chosen for use with an electronicmessage storage module according to the present disclosure may be basedon the particular implementation of the messaging system and method.Example data storage methodologies may include, but are not limited to,one or more tables, a database, a file system, and any combinationsthereof. In one example, as will be described in greater detail below,electronic message storage module 130 stores header (“container”)information and message content separate from each other to minimizecorrelation by a third party between identifying information regardingthe electronic message (e.g., identification of sender, recipient,date/time of message, location of message) in the header information andthe content of the message. In an alternate example, message content andheader information may be stored together and separated during display.In one embodiment of the present disclosure, header information andmessage content are never stored or displayed together. In such a case,a correlation (e.g., a non-identifying message ID described in detailbelow) may be utilized to associate the two components.

Electronic message 105 as communicated to system 100 in the example ofFIG. 1 includes a recipient address 135 and a message content 140. Arecipient address, such as recipient address 135 may be an indicatorthat identifies a particular desired recipient of an electronic message,such as electronic message 105. In one example, a recipient address maybe a unique identifier (e.g., a screen name, a login name, a messagingname, etc.) established specifically for use with system 100 at userregistration with the system. In another example, a recipient addressmay be a pre-established electronic mail (email) address, text messagingaddress, instant messaging address, Short Messaging Service (SMS)address, a telephone number (e.g., a home, work, mobile telephonenumber), BLACKBERRY personal identification number (PIN), or the like,that is associated with the recipient and provided by a third-partyprovider. Example third-party providers include, but are not limited to,a web-based commercial fee and fee-free provider (e.g., YAHOO, HOTMAIL,AMERICA ONLINE, etc.), an Internet service provider (e.g., AMERICAONLINE, MSN, cable operator, telephone company, etc.), a telephoneprovider (e.g., VERIZON, CINGULAR, etc.), BLACKBERRY provider, anemployer, an educational institution, and other email providers. Thethird-party address may be chosen by a user as their unique identifierat registration. In an alternative embodiment, a sending user may know athird-party address of an intended recipient and use it as a recipientaddress when generating electronic message 105. In such an embodiment,it is possible that the intended recipient is not a registered user ofsystem 100. In one example, system 100 may optionally include anexternal system communication generator 145 configured to send anotification message to the third-party system associated with therecipient address used with electronic message 105. External systemcommunication generator 145 is in communication with the appropriatenetwork for communication with the corresponding third-party address fordelivering the notification message. In one example shown in FIG. 1,external system communication generator 145 is shown connected to theInternet. In one example, a notification message may include anindication that someone has sent the desired recipient an electronicmessage on system 100 and that the intended recipient may register touse system 100. The notification message may include directions (e.g., ahyperlink) to a publicly available portion of system 100 forregistration.

An electronic message may be any electronic file, data, and/or otherinformation transmitted between one or more user computers. Anelectronic message may include (e.g., as part of a message content) anyof a wide variety of information including, but not limited to, text, animage, video (e.g., single play video utilizing an application, such asMACROMEDIA FLASH), binary, tabular data (e.g., a spreadsheet), rich textincluding variable font color, tables, etc.), audio (e.g., single playaudio utilizing an application, such as MACROMEDIA FLASH), other typesof data, and any combinations thereof. In one example, a message contentof an electronic message may include embedded information. In anotherexample, a message content of an electronic message may include anattached and/or linked file. In such an example with an attached and/orlinked file, the attached and/or linked file may be automaticallydeleted from the messaging system after being viewed by a recipient.Typically, a message content, such as message content 140 does notinclude information that in itself identifies the message sender,recipient, location of the electronic message, or time/date associatedwith the electronic message.

System 100 may optionally include a message ID generator 150. Asdescribed in further detail below, message ID generator 150 may generatea message ID for each electronic message received by system 100. Themessage ID is associated with the corresponding message. A message ID isused to associate a container (i.e., header) information with acorresponding separately-stored message content. In one example, amessage ID may be created using a unique 128 bit, randomly generatednumber. System 100 may include a correlation between header informationand message content in a variety of ways including, but not limited to,a database, a lookup table, an entry in a file system, and anycombinations thereof. Utilizing a message ID associated with anelectronic message, such as electronic message 105, system 100 mayhandle (e.g., store, deliver, display, etc.) a header information and amessage content of a particular electronic message separately with theability to correlate the two at a later time. Thus, a message contentmay be handled without any of the identifying header information. Amessage ID may contain unique and/or non-unique information. Forexample, a message ID may include a sequence number (e.g., 1, 2, 3, 4,etc.) identifying a number of a message amongst a group of messages. Asequence number may be re-used. For example, when an electronic messagewith a sequence number of “1” is viewed and subsequently deleted,sequence numbers for remaining electronic messages may be adjusted sothat the electronic message having sequence number “2” is renumbered tonumber “1” and so forth. In another example, a message ID may include asequence number and a unique user identifier (e.g., a user ID, a loginID, etc.).

System 100 may optionally include a reply ID generator 155. As describedfurther below, reply ID generator 155 generates a reply ID for eachelectronic message received by system 100. The reply ID associates anelectronic message, such as electronic message 105, with the sender ofthe electronic message. In one example, a reply ID may include noinformation that in itself would identify a sender of an electronicmessage to a third party that does not have access to the correlationmaintained by the messaging system. System 100 may include a correlationbetween a reply ID and a corresponding message sender in a variety ofways, including, but not limited to, a database, a lookup table, anentry in a file system, and any combinations thereof. In one aspect, areply ID associated with an electronic message allows the headerinformation and/or the message content of the electronic message toinclude no information about the sender of the message that itselfprovides a traceable identity of the sender. As described in more detailbelow, a recipient may still send a reply electronic message to theoriginal sender. Additionally, a third-party that may intercept, log, orotherwise come in possession of the header information and/or themessage content will not be able to trace the electronic message to thesender without also gaining access to the correlation maintained bysystem 100. A reply ID may include a variety of different identifiersthat allow a messaging system, such as system 100, to direct a replyelectronic message back to a sender of the original electronic message.In one example, a reply ID may be created using a randomly generatednumber (e.g., a 128 bit, randomly generated number).

System 100 includes a display generator 160 in communication withelectronic message storage module 130. Display generator 160 isconfigured to provide information representing a display image fordisplay on a user computer, such as user computers 110, 115. Exampledisplay images include, but are not limited to, a user login display, adisplay listing information representing available electronic messagesfor viewing, a display for entering an electronic message, a display ofa message content of an electronic message, a display for entering areply electronic message, and any combinations thereof. In one example,display generator 160 may be configured to utilize a message ID ingenerating a first information 165 representing a first display imageincluding at least some of the header information for electronic message105. Display generator 160 may also be configured to generate a secondinformation 170 representing a second display image including messagecontent 140 of electronic message 105. FIG. 1 illustrates first andsecond information 165, 170 communicated with computer 115 for displayto a recipient user. In this example, display generator 160 generatesfirst and second information 165, 170 in a manner that does not allowthe first and second display images to be displayed at the same time.Separate display of header information and message content for anelectronic message reduces traceability of the electronic message. Inone aspect, screenshot logging at a computer, such as computer 115, maynot capture both header information and message content simultaneously.Additionally, separation of header information and message contentphysically and/or temporally during communication to a user computerover an open network, such as the Internet, can thwart misuse of theelectronic message by reducing the ability of intercepting bothcomponents of the electronic message.

Display generator 160 may utilize any of a variety of well known displaygeneration methodologies and/or protocols for creating informationrepresenting a displayable image. Example methodologies/protocolsinclude, but are not limited to, hypertext markup language (HTML),extensible markup language (XML), direct graphic generation, and anycombinations thereof. In one example, system 100 resides on one or moreserver computers and display generator 160 includes and/or utilizes aweb server application to generate information representingweb-browser-displayable images that may be viewed by a user computerincluding a web browser. In another example, display generator 160 maybe configured to instruct a browser or other application of a usercomputer displaying a display image according to the present inventionto not cache any of the information related to the display image.

System 100 may further include a deletion module 175 in communicationwith electronic message storage module 130. Deletion module 175 isconfigured to delete header information and/or message content fromsystem 100 after a predetermined amount of time. In one example,deletion module 175 is configured to automatically delete headerinformation and corresponding message content immediately after themessage content is displayed. In another example, a deletion module(e.g., deletion module 175) is configured to automatically delete headerinformation upon display of a corresponding message content. In yetanother example, a deletion module (e.g., deletion module 175) isconfigured to automatically delete message content upon a display of themessage content being closed. In still another example, a deletionmodule is configured to automatically delete header information and/ormessage content, whether or not they have been viewed, after apredetermined time (e.g., twenty-four hours after being received). Instill yet another example, a deletion module is configured toautomatically delete header information and/or message content apredetermined time (e.g., twenty-four hours) after first beingdisplayed. In a further example, a predetermined amount of time mayinclude a predetermined number of viewings (other than a single viewing)of a particular electronic message (e.g., an electronic message isdeleted after 20 views). In still a further example, a deletion module(e.g., deletion module 175) is configured to automatically delete headerinformation upon display of a corresponding message content and toautomatically delete message content upon a display of the messagecontent being closed. Combinations of deletion protocols, such as theseexamples, are also contemplated.

In an alternate embodiment, system 100 may include a display-basedkeyboard generator 180. Display-based keyboard generator 180 isconfigured to generate a display-based keyboard that may be includedwith a display image generated by display generator 160. A display-basedkeyboard can be utilized by a user (e.g., through mouse click or touchscreen depression) to input information (e.g., username, password,recipient address, message content) without the use of the standardkeyboard associated with the user computer. In this way interception bykeyboard (keystroke) logging hardware and/or software resident on theuser computer, such as computers 110, 115, can be avoided. In oneexample, a display-based keyboard generator may utilize FLASH technologycommercially available from Macromedia Inc. In another example, adisplay-based keyboard generator may utilize Java technologycommercially available from Sun Microsystems. In one aspect aFLASH-based keyboard may randomly place spaces between characters in theon-screen keyboard to further prevent interception of the message.Although this is a relatively slow data entry method, a user can be moreassured that their information is not being logged and/or intercepted.

System 100 may also optionally include a reply message receiver 185.Reply message receiver 185 is configured to receive a reply message toone or more original electronic messages viewed by a recipient. In oneaspect, a sender of an original electronic message may be determinedfrom an identifying characteristic included, or associated, with theelectronic message. Example identifying characteristics include, but arenot limited to, a reply ID, an email address, a username, a displayname, login ID, and any combination thereof. In one example, a reply IDof the original electronic message may be utilized in generating a replymessage. In one example, a reply message as communicated by computer 115to system 100 need only include a message content 190. System 100 mayinclude a reply generator 195. Reply generator 195 may be configured toutilize the original reply ID to associate message content 190 and anycorresponding header information with the original electronic messagesending user. Message ID generator 150 may be configured to generate amessage ID for the reply electronic message (i.e., message content 190and corresponding header information). Reply ID generator 155 may beconfigured to generate a new reply ID for the reply message andelectronic message storage module 130 may store message content 190 andcorresponding header information separately for later display to theuser (original sender).

FIG. 1 illustrates only an exemplary embodiment of a messaging systemand networking environment according to the present disclosure. As willbe appreciated by those skilled in the art and as described herein,variations to system 100 and the network environment may be utilized inimplementing the various aspects and methodologies of the presentdisclosure. FIGS. 3 and 4 illustrate alternate computing environments.FIG. 3 illustrates one embodiment of a messaging system 300 according tothe present disclosure. System 300 includes a computing environmenthaving a single server computer 310. User computers 315 and 320communicate with server computer 310 via network 325. An electronicmessage 330 is communicated utilizing system 300. A reply electronicmessage 340 is also illustrated. FIG. 4 illustrates another embodimentof a messaging system 400 according to the present disclosure. System400 includes a computing environment having two server computers 405,410. User computers 415 and 420 communicate with server computers 405,410 via network 425. An electronic message 430 is communicated utilizingsystem 400. A reply electronic message 440 is also illustrated. Servercomputers 405, 410 together perform the functionality of the singleserver computer 310 of FIG. 3.

Referring to FIGS. 3 and 5, an exemplary operation of a messaging systemaccording to the present disclosure, such as system 300, can bedescribed. A user may log into system 300 at computer 315 (step 505 ofFIG. 5). For example, a user may access a web site or other networkedinterface associated with server 310. Server 310 may then provideinformation representing a display image (e.g., a web page) for displayon computer 315 that allows the user to log into the system. In oneaspect, a user of system 300 may have associated therewith a login IDand password for logging into system 300. FIG. 7 depicts an examplelogin display 700 that may be used. In one aspect, system 300 mayprovide an instruction to a browser or other application on computer315, or other computer viewing a display image according to the presentdisclosure, to not cache the information contained in the display image.Upon entry of a valid login ID and password, server 310 establishes acommunications link with computer 315 (e.g., a key infrastructure,secure sockets layer (SSL), secure HTTP (HTTPS) or other secure ornon-secure communications link). In one example, system 300 may utilizean email address as a login ID.

In one aspect, while a user is logged into system 300, a session may beestablished including the establishment of a session ID. A session and acorresponding memory may be utilized by system 300 to maintain certaininformation regarding the session and the user (e.g., user'sidentification information, a reply ID).

Upon proper login, the user may be presented with a session startingdisplay image. One of skill in the art will appreciate that a variety ofstarting display images (i.e., pages) may be available for display to auser upon initial login to system 300. In one example, a display imagefor inputting an electronic message may be displayed. FIG. 8 illustratesone example of a starting display image 800. Display image 800 includesa first portion 805 for entering a recipient address or other identifierfor one or more recipients of a message. Display image 800 alsoillustrates an “inbox” portion 810 for listing unread electronicmessages on the system for the logged in user. In this example, anoptional display name 815, “Mary Smith” for the logged in user isdisplayed. A display name may be the same or different from acorresponding login name and/or user address, and may or may not includeidentifying information regarding the user.

Upon entering a recipient address (step 510 of FIG. 5) and activating abutton 820 or other trigger, a message content display screen, such asmessage content display screen 900 of FIG. 9 may be displayed. Displayscreen 900 includes a first portion 910 for inputting (step 515 of FIG.5) a message content corresponding to the recipient address input atportion 805 of FIG. 8. In this example, the recipient address and themessage content are entered on separate display screens. In anotherexample, the recipient address and message content may be input on asingle display image screen. Separation of the entry of the recipientaddress and message content further reduces the traceability of anelectronic message by, in part, reducing the ability of logging atcomputer 315.

In an alternative embodiment, a display-based keyboard (as discussedabove) may be included in an electronic message input displays, such asdisplay images 700, 800, and 900. A user may use a mouse or otherpointing device (e.g., a touchscreen display) to select characters beingentered.

FIG. 9 illustrates an example message content 930 having been entered inportion 910. Upon completion of message content entry, a user may selectbutton 840, or other indicator, to communicate message content 930 toserver 310 (step 520 of FIG. 5). In one example, the recipient addressmay be communicated to server 310 separately from a correspondingmessage content at the time of entry. This may reduce the ability tointercept the entire electronic message during communication to server310. In another example, the recipient address may be retained atcomputer 315 until the entry of corresponding message content in asubsequent display image. In one example, upon communication of therecipient address and message content 930, computer 315 retains no traceof the either the recipient address or message content 930. For example,each may exist only in random access memory (RAM), and possibly invirtual memory (e.g., a page file) established in a disk drive, atcomputer 315 from the time the user types the information until theloading of the next display image at computer 315, after which theinformation is effectively deleted. Referring to FIG. 3, electronicmessage 330 is illustrated as including a recipient address and messagecontent that is communicated from computer 315 to server 310.

In an alternate embodiment, upon server 310 receiving electronic message330, instructions associated with system 300 (e.g., instruction storedat server 310) generates a reply ID and associates the reply ID withelectronic message 330 (step 525 of FIG. 5). Server 310 maintains acorrespondence between the reply ID and the sending user. In oneexample, a new reply ID is created for each electronic messageregardless of whether the sending user is the same as another electronicmessage. This enhances the reduced traceability of the electronicmessage.

In another alternate embodiment, at step 530, system 300 generates amessage ID for associating the separated message content and headerinformation of electronic message 330. Server 310 maintains acorrespondence between the message content and header information.

At step 535, header information associated with electronic message 330is identified for separation from message content 930. In one aspect,separation of information that identifies the sending user, recipientuser, location of the electronic message, timing of electronic messagefrom the message content may be implemented by associating suchinformation with a container or header information component of theelectronic message. In one example, utilization of a reply ID and amessage ID can further facilitate the removal of information that itselfidentifies a sending user or recipient. A display name for the sendinguser may be generated and associated with the header information. Thedisplay name for the user need not be unique, thus maintaining theanonymity of the user when electronic message 330 is ultimatelycommunicated to computer 320 or otherwise viewed by the recipient. Inone example, system 300 replaces all information associated withelectronic message 330 that could itself identify the sending user. Inone embodiment, a predetermined display name for the sending user thatdoes not provide unique identification of the sending user may begenerated and associated with corresponding header information. Inanother example, system 300 may utilize a display name that includesinformation that uniquely identifies the sending user (e.g., login name,email address, etc.).

In one example, header information for a particular electronic message,such as header information, may include, but is not limited to, a replyID, a message ID, a date/time associated with the electronic message(e.g., date/time of creation, date/time of delivery, etc.), a displayname representing a sender of the electronic message, and anycombinations thereof.

At step 540, an electronic message 330 is associated with a recipientrepresented by the recipient address. In one example, a location of therecipient is determined. As used herein, a location may include amessage mailbox, a message server associated with the recipient, acomputer associated with the recipient, an electronic address of therecipient, a display name for the recipient in system 300, or the like.For example, system 300 may identify a user by a variety of identities(e.g., display name, login ID, associated email address, text messagingaddress, instant messaging address, SMS address, mobile number,BLACKBERRY PIN, or the like) to determine a routing for electronicmessage 330. As discussed above, if the recipient is not a registereduser of system 300, a notification may be sent to a third-party systemof the existence of electronic message 330. For example, if therecipient is identified by a third-party email address, a notificationmay go to the email recipient over the third-party email network.Similarly, if the recipient is identified by a Blackberry PIN, anotification may go to the recipient over the Blackberry network.

At step 545, header information and message content are stored. In oneexample, header information and message content are stored separatelyfrom each other (e.g., in separate files, in separate databases, inseparate tables, etc.). A message ID may be used to maintain acorrespondence between the separated components of electronic message330. Storage may occur in a variety of ways including, but not limitedto, storage at a location of the recipient and storage at server 310. Inone example, the header information and message content of electronicmessage 330 are stored in a storage medium of server 310 in separatetables.

In another example, each user of system 310 is assigned a storagedirectory (e.g., on a server, on a user computer such as in apeer-to-peer arrangement, etc.). Upon association of a user with therecipient address, the message content and header information for anyelectronic messages to that user may be stored in that user's storagedirectory. The following XML file definition illustrates an example ofheader information for two electronic messages stored in a user storagedirectory.

<?xml version=“1.0” encoding=“UTF-8” ?> <streams> <streamsummaryid=“8C515D3B6A3A99C6C1A1F1DE019C7AB0” from=“user one”datereceived=“1143660969” replyid=″6C04279318E53F61A9D7984ADD4C3E1A /><streamsummary id=“98F78AD49BFC35B36357850C107460DF” from=“user four[mike.smith@onlinemail.com]” datereceived=“1143665437”replyid=“0648B99BE6F9E5AB21F3A163AD242173” />  </streams>

The above file definition includes a message ID (“streamsummary id”), adisplay name (“from”), date received, and reply ID for each message inthe recipient's storage directory. Note that as an implementationvariation, the sending user of the second message has associatedtherewith a display name, “user four”, which includes a reference to anemail address, mike.smith@onlinemail.com. This email address may or maynot be associated with an actual email account of a third-party system,and may or may not provide actual identifying information related to thesending user. The following message content XML file is storedseparately in the storage directory from the above header information.

<?xml version=“1.0” encoding=“UTF-8” ?> <messageid=“8C515D3B6A3A99C6C1A1F1DE019C7AB0” ″ subject=“”> <text>This is myfirst message to you.</text> </message>

The following second message content XML file is stored separately inthe storage directory from the header information.

<?xml version=“1.0” encoding=“UTF-8” ?> <messageid=“98F78AD49BFC35B36357850C107460DF” subject=“”> <text>This is a replymessage to your message from Monday.</text> </message>

Each of the message content XML files includes the corresponding messageID for correlation back to the corresponding header information. Eachmessage content XML file also includes the message content. One skilledin the art would recognize other storage methodologies for separatingheader information from message content that are consistent with thepresent disclosure.

Referring again generally to FIG. 5 at step 550 to describe theretrieval of an electronic message by a user, a recipient user logs intosystem 300 using computer 320. A display image similar to that in FIG. 7may be utilized as a login display. In one example, upon entry of avalid login ID and password, a communication link between computer 320and server 310 is established. At step 555 of FIG. 5, a display imagehaving header information is communicated (e.g., from server 310 tocomputer 320. System 300 provides a display image to computer 320representing at least some of the header information associated with anyelectronic messages associated with the recipient user. FIG. 10illustrates an example display image 1000 including a recipient addressinput portion 1005 and a message listing portion 1010. Message listingportion 1010 includes a list of header information 1015, 1020, 1025 ofthree electronic messages. Message listing portion 1010 includes adisplay name and a date/time received for each of header information1015, 1020, 1025. Each message container (or header information) 1015,1020, 1025 may also include an association to a message ID and anassociation to a reply ID (although, not displayed in display image1000). Message content for each electronic message is not displayed viadisplay image 1000.

FIG. 3 illustrates header information and a message content forelectronic message 330 being communicated to computer 320. In thisexample, header information 1015 represents electronic message 330.

In an alternate embodiment, the header information communicated tocomputer 320 may include a sequence number (ex: 1, 2, 3, etc.) assignedto each electronic message associated with a particular user and/or sentto a particular computer. In such an embodiment, each sequence numbermay be associated in system 300 with the corresponding message ID. Themessage ID may be removed from the corresponding header informationand/or message content. In this manner, system 300 may avoid sending amessage ID to a user computer and instead may send the sequence number,which may be reused when a message is deleted and is, therefore, lesstraceable from the user computer.

At step 560, a user may select one of the electronic messages indicatedby header information 1015, 1020, 1025 (e.g., by selecting acorresponding “read” indicator in message listing 1010). At the time ofselection, the message content for each electronic message may not havebeen communicated to computer 320. In one example, message content maybe communicated to computer 320 along with corresponding headerinformation (but, not displayed). In another example, message contentmay be retained at server 310 until a second request from a user is sentto server 310 to view a message content of a particular electronicmessage. In such an example, computer 320 requests a message content fora selected electronic message (e.g., electronic message 330 via headerinformation 1015) from server 310. In response to this action, server310 may associate a message ID from the selected header information andcommunicate the message content having the corresponding message ID tocomputer 320. Alternatively, where a sequence number is utilized foreach electronic message, server 310 associates the sequence number ofthe selected electronic message with a corresponding message content andcommunicates the message content to computer 320.

At step 565, a display image including the message content, but none ofthe header information, is provided at computer 320. FIG. 11 illustratesone example display image 1100 presenting message content, independentof header information, for electronic message 330 upon the selection ofheader information 1015 in display image 1000 of FIG. 10. Display image1100 includes a message content portion 1110 including the messagecontent of electronic message 330. Display image 1100 also includes areply message input portion 1120.

In one alternate embodiment, display image 1100 may employ FLASHtechnology to display the message content. For example, display image1100 may require the user to “park” the on-screen cursor in an area indisplay image 1100 to see the message content, which may be displayed asa Flash movie. Should the cursor be moved, the displayed message contentwill be hidden from view on the screen to allow the user to quicklyprevent the message content from being seen by onlookers. Also, thistechnology may also be utilized to prevent the message content frombeing printed using the web browser or application print because themessage content will be hidden as soon as the user moves the mouse inattempt to print. In another example, the use of Cascading Style Sheets(CSS) may allow the portion of the display image including the messagecontent to be not shown or hidden during printing.

Referring to FIG. 5, at step 570, the electronic message, such aselectronic message 330, is automatically permanently deleted from server310 at a predetermined time at step 565. In one example, headerinformation is deleted from server 310 upon its communication tocomputer 320, and then the corresponding message content is deleted fromserver 310 upon its communication to computer 320. In such an example,once message list 1010 is displayed to a user, the user must view themessage content during that session. To achieve the ability to view onemessage content and return to message list 1010, the header informationfor non-viewed electronic messages may be retained in memory at computer320. In another example, header information is retained at server 310until the corresponding message content is viewed, at which point boththe header information and the message content is deleted from server310. A reply ID for a particular electronic message may be retained inmemory of server 310 (e.g., in response to a request for viewing amessage content, server 310 may associate a current session ID with thereply ID) until the display image that displays the correspondingmessage content is closed by the user. This will allow a user to utilizereply message portion 1120 of display image 1100 to reply to the currentmessage content without having to have a unique address for the originalsender associated with the message content on computer 320. FIG. 3illustrates a server-based system. Deletion from an alternate system,such as a peer-to-peer system, may include deletion of an electronicmessage from storage at a user computer.

As discussed above, other examples of deletion times for deletion from asystem, such as system 300, include, but are not limited to, automaticdeletion of header information and corresponding message contentimmediately after the message content is displayed, automatic deletionof header information upon display of a corresponding message content,automatic deletion of message content upon a display of the messagecontent being closed, automatic deletion of header information and/ormessage content (whether or not they have been viewed) after apredetermined time (e.g., twenty-four hours after being received),automatic deletion of header information and/or message content apredetermined time (e.g., twenty-four hours) after first beingdisplayed, and any combinations thereof. In one example, system 300 isconfigured to require a given deletion scheme (e.g., automatic permanentdeletion of an electronic message upon displaying the electronic messageand/or one or more of its components) regardless of a desire of asending and/or recipient user.

One example of a deletion algorithm appropriate for deletion ofelectronic messages from system 300 include, but is not limited to, USDepartment of Defense (DoD) clearing and sanitizing standard DoD5220.22-M. In an alternative embodiment, server computer 310 may deletean electronic message, such as electronic message 330 and thecorresponding reply ID from its own memory if the recipient fails toretrieve the electronic message within a predetermined amount of time.

In one example, after viewing the message content, the user may select abutton 1130 on display image 1100 to return to the message listing(e.g., message listing 1010 of FIG. 10), or otherwise close the displayimage (step 575 of FIG. 5). In another example, after viewing themessage content, the user may choose to respond to electronic message(step 580 of FIG. 5), as will be described in further detailhereinafter. If the user fails to respond to the message content withina predetermined amount of time (e.g., 1 hour) an associated reply ID maybe deleted from server 310. If the user chooses to return to the listingof messages, the message content may be automatically deleted from therecipient's computer 320 after viewing (step 585 of FIG. 5). Forexample, the message content will exist only in RAM, and possibly invirtual memory established in the disk drive, in computer 320 from thetime the user views the message content until the loading of the nextscreen into computer 320, after which the message is effectivelydeleted. Furthermore, in one example, the listing of messages (e.g.,message listing 1010 of FIG. 10), will no longer include the headerinformation for a particular electronic message (e.g., headerinformation 1015 of electronic message 330) that has been deleted fromserver 310, and the session ID will no longer include reference to thereply ID. In other words, the user will not be able to view that messageagain or reply to the message once it has been deleted. For example,FIG. 10 illustrates message list 1010 after electronic message 330 hasbeen deleted from server 310 and computer 320.

In an alternative embodiment, electronic messages may be sent, stored,and/or retrieved using encryption technology. Various encryptiontechnologies are known to those skilled in the art. For example, acombination of public and private encryption keys may be utilized byusers and the system to further ensure security and reduce traceabilityof electronic messages until deletion.

Referring to FIGS. 3 and 6, operation of system 310 in optionallysending a reply message 340 from user computer 320 to user computer 315can be described. As shown for example in FIG. 11, the recipient user ofthe original electronic message (e.g., electronic message 330) maychoose to reply to the message utilizing reply message input portion1120. Reply message input portion 1120 allows a user to input a messagecontent for a reply message. In this example, there is no need to inputa recipient address as an original reply ID may be utilized by system300 in determining the routing of the reply electronic message. Afterthe user completes reply message input portion 1120, he or she mayselect the “send stream” button 1140. In response, computer 320communicates the reply message content to server computer 310 (step 605of FIG. 6). After the reply message content is communicated, computer320 retains no trace of the message's existence. For example, themessage will exist only in RAM, and possibly in virtual memoryestablished in the disk drive, in computer 320 from the time the usertypes the message until the loading of the next screen into computer320, after which the message is effectively deleted. In an alternativeembodiment, a display-based keyboard, as discussed above, may beutilized as part of display image 1100 for inputting reply messagecontent.

In one example, upon receipt of the reply message content, server 310determines the reply ID for the original message (e.g., from the currentsession ID), and uses the reply ID to associate the electronic messagewith the user that sent the original message 330 (step 610 of FIG. 6).This may be accomplished in a variety of ways including, but not limitedto, a lookup table, a database, or the like, which provides acorrelation between the reply ID and the sender of the initial message.At step 615, system 300 then deletes the initial reply ID (e.g., thereply ID for message 330) from server 310's memory. In an alternateembodiment, the identity of the sender of an original electronic messagemay be determined from another identifier associated with the electronicmessage (e.g., display name, login ID, associated email address, textmessaging address, instant messaging address, SMS address, mobilenumber, BLACKBERRY PIN, or the like).

Next at step 620, the server 310 may generate another reply ID andassociate the reply ID with reply message 340 in a similar fashion asdiscussed above for electronic message 330. Server 310 may also generateanother message ID, which establishes a correlation between the messagecontent of reply message 340 and header information for reply message340. Header information and message content for reply message 340 arehandled and stored similarly as described above with respect toelectronic message 330. Reply message 340 may be viewed by its recipientin the same manner as original electronic message 330 was viewed.

Advantageously, the system 300 allows the users of the computers 315 and320 to have a private conversation over network 325. After messages,such as electronic message 330 and reply message 340, are communicatedthe sender leaves no proof of the message on his or her computer. In oneexample, after the recipient views the message (or at anotherpredetermined time), the message no longer exists on system 300, thusensuring that the message cannot be forensically recreated and ensuringthat there is no record of the message remaining on system 300. Inanother example, no copies of an electronic message are ever deliveredto a user computer. In such an example, only non-caching display imagesof header information and message content are displayed separately. Theheader information and message content may be immediately,automatically, and permanently deleted from the system upon display.Once each display image is closed, the information is gone forever.Thus, in this example, there is never a copy on the user computer to bearchived, forwarded, copied, pasted, etc. In another aspect, separatedisplay of header information and message content prevents a singlescreen capture at a user computer from creating a complete record of theelectronic message. In yet another aspect, a system and method accordingto the present disclosure may provide an end-to-end recordlesselectronic messaging system that upon the deletion of the electronicmessage leaves no trace of the message content, header information, orthe fact that it was created, existed, delivered, viewed, etc.

FIG. 4 is a schematic diagram depicting a system 400 having analternative network topology. The embodiment of FIG. 4 is substantiallysimilar to that of FIG. 3, except that system 400 of FIG. 4 employs twomessage servers 405 and 410 operably coupled to user computers 415 and420 by one or more networks 425. In the embodiment of FIG. 4, the twomessage servers 415 and 420 together perform the tasks previouslydescribed for the single message server 310 of FIG. 3. For example, inthe method for sending the initial message 330, message server 405 mayperform steps 505 to 535 and a portion of step 540 of FIG. 5, whilemessage server 410 acts as the “recipient location” and performs aportion of step 540 and steps 545 to 585 of FIG. 5. It will beappreciated that both servers 405 and 410 may keep track of the reply IDand both servers 405 and 410 delete the message after it has been passedalong. This arrangement is particularly useful where message servers 405and 410 are each associated with a different enterprise, businessorganization, LAN, or the like.

As discussed above, separation of entry of header information frommessage content may occur via the use of a single display image screenin which the header information (such as the recipient address) and themessage content are not displayed on the single display image screen atthe same time. Such a single display image screen may be utilized in anelectronic messaging system, such as the electronic messaging systemdiscussed above with respect to FIG. 1. Such a single display imagescreen may include a portion for entering a recipient address (and,optionally, additional header information, such as a message subjectline) and a portion for entering a message content. A display imagescreen having each of these two portions includes the two portions beingvisible to a user at the same time on the computer, but only allowingdata that has been entered in (or is included in) either the recipientaddress entry portion or the message content entry portion to be visiblydisplayed at a time. Exemplary ways to prevent a recipient address entryportion of a message content entry portion from being displayed at thesame time are discussed further below with respect to the examples ofFIGS. 12 to 14. Other aspects of such a display image screen thatdisplays an entry portion for a recipient address and an entry portionfor a message content can be configured in a variety of ways. Forexample, the single display image may appear on a display screen of thecomputer with the recipient address entry portion in one “window” andthe message content entry portion in another “window,” both windowsvisible to the user at the same time. Additionally, it is contemplatedthat either or both of the recipient address portion and the messagecontent portion may include two or more data entry sections (e.g., forentering multiple recipient addresses, for entering carbon copyaddresses, for entering other header information, for entering a messagecontent attachment, etc.). A display image may also include one or moreuser controls for actuating one or more functionalities of the displayimage. Example functionalities include, but are not limited to,indicating that the entry of a recipient address is complete, indicatingthat the entry of a message content is complete, toggling between entryof a recipient address and a message content, indicating that theelectronic message is ready for transmission from the computer, and anycombinations thereof. One example of a display image screen is discussedfurther below with respect to FIGS. 15 to 17.

FIG. 12 illustrates one exemplary implementation of a single displayimage screen method with separation of header and content information onentry by a sending user of a computer. At step 1205, a display imagescreen is provided that includes a portion for entering a recipientaddress for an electronic message and a portion for entering a messagecontent. Exemplary recipient addresses and message content are discussedabove (e.g., with respect to FIG. 1). At step 1210, a recipient addressis received from a user of the computer via the portion of the displayimage screen for entering a recipient address. At step 1215, therecipient address is transmitted from the computer. At step 1220, amessage content is received from a user of the computer via the portionof the display image screen for entering a message content.

The display image screen and the two portions are configured so that thedata representing the recipient address and the data representing themessage content are not visibly displayed at the same time. Example waysto make data not visibly displayed on a display image screen include,but are not limited to, blurring the data, covering the data (e.g., witha graphical element), darkening the display of the display portioncontaining the data, removing the data from the display (e.g., whileleaving the display image of the portion of the display on the screen),and any combinations thereof.

The timing of making the data of one portion of a display image screennot visibly displayed while data in another portion of the display imagescreen is visibly displayed can occur in a variety of ways. Exampletimings include, but are not limited to, making data of one portion notvisibly displayed upon actuation of an interface control by a user(e.g., actuation of a control indicating that the entry of a recipientaddress is complete, indicating that the entry of a message content iscomplete, toggling between entry of a recipient address and a messagecontent entry, indicating that the electronic message is ready fortransmission from the computer, etc.), making data of one portion notvisibly displayed upon commencing entry of data in the other portion,making data of one portion not visibly displayed upon the user stoppingdata entry in that portion for an amount of time (e.g., a predeterminedand configured amount of time), and any combinations thereof.

In another exemplary aspect of separating the display of a recipientaddress from a message content on a single display image, a user can berestricted from entering data into one portion of the display imagebased on a variety of factors. Example factors for use in restrictingentry of data into a portion (e.g., a recipient address entry portion, amessage content entry portion) include, but are not limited to,restricting data entry into one portion of the display image until datais no longer visible to the user in the another portion of the displayimage (e.g., restricting entry of message content in the message contententry portion until the recipient address information is no longervisible in the recipient address entry portion), restricting data entryinto one portion of the display image until data entered into anotherportion of the display image has been transmitted from the computer(e.g., restricting entry of data in a message content entry portionuntil a recipient address has been transmitted from the computer), andany combinations thereof. Example ways to restrict entry into a portionof a display image include, but are not limited to, blurring the entryportion (e.g., such that any information typed in the portion is notvisible), covering the entry portion (e.g., with a graphical element),darkening the display of the display portion, disabling any data entryin the portion (e.g., not allowing keyboard text entry, not allowingpointing device to click into entry portion), removing the data from thedisplay (e.g., while leaving the display image of the portion of thedisplay on the screen), and any combinations thereof.

At step 1225, the message content is transmitted from the computer. Inthe example shown in FIG. 12, the recipient address is transmitted priorto receiving the message content from the user and the message contentis transmitted thereafter. It is contemplated that other variations arepossible for when to transmit a recipient address (and possibly otherheader information) and a message content. Several variants of separatetransmission of header information and message content from a sendinguser computer are discussed further above. In another example, arecipient address and a message content are kept at the sending usercomputer until the entire message is completed (e.g., as indicated byactuation of a user interface control by the sending user). In yetanother example, a recipient address is transmitted from a user computerupon actuation by a user of an interface control and the message contentis transmitted from a user computer upon actuation by a user of aninterface control. In still another example, a recipient address istransmitted at a time after the sending user switches to data entry ofthe message content (e.g., at about the same time as the switch to themessage content entry portion and the hiding/obscuring/etc. of therecipient data in the recipient address entry portion). In one suchexample, the recipient address data may also be retained at the sendingcomputer (e.g., in a RAM memory) until a later time (e.g., at anactuation of a user control indicating a desire to no longer retain theinformation) prior to the complete transmission of the electronicmessage from the sending computer (e.g., not leaving a trace of therecipient address or the message content on the sending computer, suchas is discussed above). In an example where the recipient address datais retained at the sending computer beyond the first switch to dataentry in a message content entry portion, a user may utilize theinformation for a variety of purposes. Examples of such purposesinclude, but are not limited to, allowing for toggling back to therecipient address entry portion for viewing the recipient address,allowing for toggling back to the recipient address entry portion forupdating the recipient address (e.g., adding, deleting, changing arecipient), and any combinations thereof. In an example where an updateis made to a recipient address data in a recipient address entry portionof a display image, the updated recipient address data may betransmitted from the computer at any of a variety of times prior tocompletion of transmission of the electronic message (e.g., at time ofupdating, at time of actuation of a user interface control indicatingthe completion of entry of the recipient address, at time of actuationof a user interface control indicating the completion of the electronicmessage, etc.).

FIG. 13 illustrates another exemplary implementation of a single displayimage screen method with separation of header and content information onentry by a sending user of a computer. Aspects of this exemplaryimplementation are similar to those discussed above (e.g., with respectto the implementation of FIG. 12) except as indicated. At step 1305, afirst portion of a display image screen is provided for entering arecipient address. At step 1310, a second portion of the display imagescreen is provided for entering a message content. At step 1315, dataentry (e.g., of one or more recipient addresses) is allowed in the firstportion, while not allowing data entry in the second portion. At step1320, a recipient address is received via the first portion. At step1325, the recipient address is transmitted from the computer. At step1330, the recipient address information in the first portion is made tobe not visible to the user (e.g., by blocking its visibility, etc.). Atstep 1335, data entry is allowed in the second portion. At step 1340, amessage content is received via the second portion. At step 1345, themessage content is transmitted from the computer. Optionally, at step1350 a check is made to determine if the recipient address was sentsuccessfully from the computer. Examples of an unsuccessful attemptinclude, but are not limited to, a failure of communications hardware(e.g., network failure), a decision by the user to update the recipientaddress (e.g., as discussed above), and any combinations thereof. If atstep 1350 a successful send is determined, the process moves to step1335. If at step 1350 an unsuccessful send is determined, the processmoves to step 1325. In an alternative example (e.g., where the sendinguser wishes to update the recipient address), step 1350 may proceed tostep 1315 to allow entry in the first portion (e.g., while blockingentry to the second portion and blocking visibility of any data in thesecond portion).

FIG. 14 illustrates an exemplary implementation of a single displayimage screen method utilized at a recipient end of a messaging system(e.g., the messaging system discussed above with respect to FIG. 1).Those relevant aspects of the single display image at the sending sideas discussed above apply to the recipient side, except where indicatedotherwise. At step 1405, a user selects a message to view (e.g., from amessage list showing header information, such as that shown in FIG. 10).At step 1410, a first portion of a display image screen is provided thatis configured to display header information (e.g., a recipient address,a sender address, a subject, a time/date of message, etc.). At step1415, a second portion of a display image screen is provided that isconfigured to display message content. At step 1420, a user is allowedto see information in the first portion while visibility of informationin the second portion is blocked (e.g., in a similar way as thatdiscussed above with respect to the method of FIG. 12). At step 1425, auser is allowed to see information in the second portion whilevisibility of information in the first portion is blocked. It iscontemplated that a recipient user may toggle between visibility ofportions as discussed above with respect to the sending side displayimage.

FIG. 15 illustrates an example of a display image screen 1505 having afirst portion 1510 for entry of a recipient address (and/or other headerinformation) and a second portion 1515 for entry of a message content.As discussed above, it is contemplated that each of portions 1510 and1515 may include multiple data entry sections (e.g., appearing asseparate portions of display image screen 1505). Display image 1505includes a header input user interface control 1520. Control 1520 may beutilized by a user to actuate the control (e.g., to indicate that theuser is done entering into portion 1510). In one example, upon actuationof control 1520, entry of data into portion 1515 may be allowed whileremoving visibility of data in portion 1510. Example user interfacecontrols include, but are not limited to, a button, a textual element, agraphical element, a hyperlink, and any combinations thereof. Exampleways to actuate a user interface control include, but are not limitedto, actuating the control using a computer keyboard, actuating a controlusing a touch-screen display, actuating a control using a computerpointing device, speaking into a voice recognition device of thecomputer, and any combinations thereof. Display image 1505 also includesa message content input user interface control 1525. In one example,upon actuation of control 1525, entry of data into portion 1510 may beallowed while removing visibility of data in portion 1515 (e.g.,allowing toggling between data entry in portions 1510 and 1515. Inanother example, upon actuation of control 1525, electronic messageentry may be completed (e.g., causing the message content and/or headerinformation to be transmitted from the computer). Display image 1505 mayinclude other user interface controls to effectuate functionality asdiscussed above with respect to FIGS. 12 to 14. Transmission of messagecontent and header information is discussed above with respect to FIGS.12 to 14. Other operational aspects of the methods of FIGS. 12 to 14 mayalso be implemented using a display image screen, such as screen 1505.

FIG. 16 illustrates another implementation of a display image screen1605 in which data representing a recipient address has been enteredinto a header information entry portion 1610. Operation of display imagescreen 1605 is similar to that of display image screen 1505, except asindicated. A message content entry portion 1615 of display image 1605has been blocked such that data entry into portion 1615 is blocked andvisibility of any data in portion 1615 is blocked while the data inportion 1610 is still available to the user. Display image 1605 includesa header input user interface control 1620 and a message content inputuser interface control 1625. Example uses of controls 1620 and 1625include, but are not limited to, indicating that the entry of arecipient address in portion 1610 is complete, indicating that the entryof a message content in portion 1615 is complete, toggling betweenentry/viewing of a recipient address in portion 1610 and a messagecontent in portion 1615, indicating that the electronic message is readyfor transmission from the computer, and any combinations thereof.

FIG. 17 illustrates an example of a display image screen 1705 that issimilar to display image screen 1605. Display image 1705 includes aheader information entry portion 1710 that is blocked for visibility anduser data entry (i.e., via dark shading of portion 1710), a messagecontent entry portion 1715 that is ready for data entry, a header inputuser interface control 1720, and a message content user input interfacecontrol 1725.

It is to be noted that the above described aspects and embodiments maybe conveniently implemented using a computer programmed according to theteachings of the present specification, as will be apparent to thoseskilled in the computer art. Appropriate software coding can readily beprepared by skilled programmers based on the teachings of the presentdisclosure, as will be apparent to those skilled in the software art.

Such software can be a computer program product which employs a storagemedium including stored computer code which is used to program acomputer to perform the disclosed function and process of the presentinvention. The storage medium may include, but is not limited to, anytype of conventional floppy disks, optical disks, CD-ROMs,magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, magnetic or opticalcards, or any other suitable media for storing electronic instructions.The term “computer readable medium” as used herein refers to a hardwaremedium and does not include a signal.

Exemplary embodiments have been disclosed above and illustrated in theaccompanying drawings. It will be understood by those skilled in the artthat various changes, omissions and additions may be made to that whichis specifically disclosed herein without departing from the spirit andscope of the present invention.

What is claimed is:
 1. A method of handling an electronic messagebetween a sending user device and a recipient user device in a networkedenvironment, the method comprising: providing a first reducedtraceability electronic messaging application program to a sending userdevice, the first reduced traceability electronic messaging applicationprogram including instructions executable by a first processor of thesending user device to provide a first plurality of reduced traceabilitydisplays via the sending user device; providing a second reducedtraceability electronic messaging application program to a recipientuser device, the second reduced traceability electronic messagingapplication program including instructions executable by a secondprocessor of the recipient user device to provide a second plurality ofreduced traceability displays via the recipient user device; receivingan electronic message at a server via a first network, the electronicmessage sent from the sending user device, wherein the electronicmessage received at the server includes an identifier of a recipient anda message content including a media component, the media componentincluding an image, the first plurality of reduced traceability displaysincluding a first display and a second display, the first displayconfigured to allow a user of the sending user mobile device toassociate the message content including a media component with theelectronic message, the second display configured to allow the user ofthe sending user mobile device to associate the identifier of arecipient with the electronic message, the instructions executable bythe first processor providing the first and second displays such thatthe identifier of the recipient is not displayed with the mediacomponent via the first display preventing a single screen capture ofboth the identifier of a recipient and the media component and theinstructions executable by the first processor provide the first andsecond displays such that the media component is not displayed with theidentifier of the recipient via the second display preventing a singlescreen capture of both the identifier of a recipient and the mediacomponent, the first display and the second display not being displayedvia the sending user device at the same time; and transmitting theelectronic message from the server to the recipient user device via asecond network that includes a wireless communications portion, whereinthe electronic message transmitted to the recipient user device includesan identifier of a sending user and the message content including amedia component, the second plurality of reduced traceability displaysincluding a third display and a fourth display, the third displaypresenting the identifier of a sending user, the fourth displaypresenting the media component, the instructions executable by thesecond processor providing the third and fourth displays such that theidentifier of a sending user is not displayed with the media componentvia the fourth display preventing a single screen capture of both theidentifier of a sending user and the media component and theinstructions executable by the second processor provide the third andfourth displays such that the media component is not displayed with theidentifier of a sending user via the third display preventing a singlescreen capture of both the identifier of a sending user and the mediacomponent, wherein the identifier of a recipient and the message contentreceived at the server each optionally include a correlation to allowthe server to receive the identifier of a recipient and the messagecontent separately and to relate the identifier of a recipient to themessage content if the identifier of a recipient is received separatelyfrom the message content at the server, wherein the third display andthe fourth display are not displayed via the recipient user device atthe same time, and wherein the identifier of a recipient and the messagecontent transmitted from the server each optionally include acorrelation to allow the identifier of a recipient and the messagecontent to be related to each other by the second reduced traceabilityelectronic messaging application program if the identifier of arecipient and the message content are transmitted from the serverseparately.